Track Tagged Assets
Using Optimized Monitor Mode on APs

To optimize
monitoring and location calculation of tags, you can enable Tracking Optimized
Monitor Mode (TOMM) on up to four channels within the 2.4-GHz band (802.11b/g
radio) of an access point. This allows you to focus channel scans only on those
channels on which tags are usually programmed to operate (such as channels 1,
6, and 11).

After enabling
Monitor mode at the access point level, you must then enable TOMM and assign
monitoring channels on the 802.11b/g radio of the access point.

To set enable TOMM
and assign monitoring channels on the access point radio, follow these steps:

Add Autonomous APs
Using Device Information

Autonomous access
points can be added to Prime Infrastructure by device information using
comma-separated IP addresses and credentials.

Cisco autonomous
access points are shipped from the factory with
Cisco as the
default enable password. This password allows users to log into the
non-privileged mode and execute show and debug commands, posing a security
threat. The default enable password must be changed to prevent unauthorized
access and to enable users to execute configuration commands from the console
port of an access point.

Procedure

On the General
tab, enter the IP address of Cisco WLC. If you are adding by the DNS name, add
the DNS name.

Step 4

On the SNMP
tab, choose the SNMP version that you created on Cisco WLC.

Step 5

If you are
using SNMP v1 or v2c, then you must provide the read and write community string
that was configured on Cisco WLC. If you are using SNMP v3, then you must
configure:

Username

Mode

Auth.Type

Auth.Password

Privacy Type

Privacy
Password

Step 6

On the
Telent/SSH tab, configure the Telnet/SSH Parameters.

Step 7

On the
HTTP/HTTPs tab, provide HTTPs credentials so that Cisco Prime Infrastructure
can collect data from them.

From the
Protocol drop-down list, choose HTTP or HTTPs. The TCP Port will change
automatically to the default port for the protocol that you have selected.

In the TCP
Port text box, enter a different TCP Port if you want to override the default.

Enter the
name of a user.

Enter the
password and confirm the same.

Enter the
Monitor username, password, and confirm the password.

Step 8

Click
Add.

After the AP is
added and its inventory collection is completed, it appears in the Access Point
list page (Configure > Access Points). If it is not found in the Access
Points list, choose
Configure > Unknown
Device page to check the status.

Note

Autonomous
access points are not counted towards the total device count for your license.

Add Autonomous APs
Using CSV Files

Autonomous access
points can be added to Prime Infrastructure using a CSV file exported from
WLSE.

Deleting Autonomous
APs from Prime Infrastructure

If you replace
Autonomous Access Points because of some reason, remove the Autonomous Access
Points from Prime Infrastructure before you install the replacement access
points on the network.

To remove an
autonomous access point from Prime Infrastructure, follow these steps:

Procedure

Step 1

Select the
check boxes of the access points you want to remove. Select the APs that are
not associated.

Step 2

Choose
Remove APs from the Select a command drop-down
list.

View Autonomous
APs

Once added, the
autonomous access points can be viewed on the Monitor > Access Points page.

Click the autonomous
access point to view more detailed information such as the following:

Operational status of the
access points

Key attributes including
radio information, channel, power, and number of clients on the radio

CDP neighbored information

The autonomous access
points can also be viewed in
Monitor > Maps.

They can be added to
a floor area by choosing
Monitor > Mapsfloor area and
choosing
Add Access
Points from the
Select a
command drop-down list.

Download Images to
Autonomous APs via TFTP

Lightweight access
point images are bundled with controller images and managed by the controller.
Autonomous access point images must be handled by a NMS system such as WLSE,
CiscoWorks, or Prime Infrastructure.

To download images
to autonomous access points using TFTP, follow these steps:

Procedure

Step 1

Choose
Configuration > Wireless
Technologies > Access Point Radios.

Step 2

Select the
check box of the autonomous access point to which you want to download an
image. The AP Type column displays whether the access point is autonomous or
lightweight.

View Autonomous APs
in Workgroup Bridge (WGB) Mode

Workgroup Bridge
(WGB) mode is a special mode where an autonomous access point functions as a
wireless client and connects to a lightweight access point. The WGB and its
wired clients are listed as clients in Prime Infrastructure if the AP mode is
set to Bridge, and the access point is bridge capable.

To view a list of all
Prime Infrastructure clients that are WGBs, choose
Monitor > Clients. From the
Show drop-down list, choose
WGB
Clients, and click
Go. The Clients (detected as WGBs) page appears.
Click a user to view detailed information regarding a specific WGB and its
wired clients.

Note

Prime
Infrastructure provides WGB client information for the autonomous access point
whether or not it is managed by Prime Infrastructure. If the WGB access point
is also managed by Prime Infrastructure, Prime Infrastructure provides basic
monitoring functions for the access point similar to other autonomous access
points.

Configure AP
Ethernet Interfaces

Note

The 152x mesh
access points are configured on any one of these four ports: port 0-PoE in,
port 1-PoE out, Port 2 - cable, and port 3- fiber. Other APs (such as
1130,1140,1240,1250) are configured on Port 2 - cable.

To configure an
Ethernet interface, follow these steps:

Procedure

Step 1

Choose
Configuration > Wireless
Technologies > Access Point Radios.

Step 2

Click the link
under AP Name to see detailed information about that access point name. The
Access Point Detail page appears.

Note

The Access
Point Details page displays the list of Ethernet interfaces.

Step 3

Click the link
under Interface to see detailed information about that interface. The Ethernet
Interface page appears.

This page
displays the following parameters:

AP Name—The
name of the access point.

Slot
Id—Indicates the slot number.

Admin
Status—Indicates the administration state of the access point.

CDP
State—Select theCDP State check box to enable the CDP state.

Step 4

Click
Save.

Configure APs by
Importing CSV Files

To import a current
access point configuration file, follow these steps:

Procedure

Step 1

Choose
Configuration > Wireless
Technologies > Access Point Radios.

Step 2

From the
Select a
Command drop-down list, chooseImport AP.

A pop-up aleart
box appears stating All Unified AP(s) are imported from CSV file only. Unified
AP(s) from Excel and XML file are not imported.

Step 3

Click
OK to close the pop-up alert box.

Step 4

Click
Go.

Step 5

Enter the CSV
file path in the text box or click
Browse to navigate to the CSV file on your computer.

The first row
of the CSV file is used to describe the columns included. The AP Ethernet Mac
Address column is mandatory. The parameters on this page are used for columns
not defined in the CSV file.

Optional fields
can remain empty. The AP Config Import ignores empty optional field values.
However, if primaryMwar and secondaryMwar entries are empty then a unified
access point update is not complete.

Ethernet
MAC—AP Ethernet MAC Address

AP Name—AP
Name

Location—AP
Location

Primary
Controller—Primary Controller Name

Secondary
Controller—Secondary Controller Name

Tertiary
Controller—Tertiary Controller Name

Note

Optional
fields can remain empty. The AP Config Import ignores empty optional field
values. However, if primaryMwar and secondaryMwar entries are empty then a
unified access point update is not complete.

Select the file
option (CSV, Excel, XML) to export the access point configurations.

Step 6

In the
File
Download window, click
Save to save the file.

Configure CDP on Access Points

Cisco Discovery Protocol (CDP) is a device-discovery protocol that runs on all Cisco network equipment. Each device sends
identifying messages to a multicast address, and each device monitors the messages sent by other devices.

Note

CDP is enabled on the Ethernet and radio ports of the bridge by default.

Procedure

Step 1

Choose Configuration > Wireless Technologies > Access Point Radios.

Step 2

Choose an access point associated with software release 5.0 or later.

Step 3

Click the slots of radio or an Ethernet interface for which you want to enable CDP.

Step 4

Select the CDP State check box to enable CDP on the interface.

Step 5

Click Save.

Configure Access
Points XOR Antenna

Prime Infrastructure
provides the ability to enable or disable the use of specific antennas. All
antennas are enabled by default.

If you choose
Configuration > Wireless
echnologies > Access Point Radios, and select an
XOR
(2.4GHz) or
XOR
(5GHZ) from the Radio column, the following page appears.

This page contains
the following fields:

Note

Changing any of
the fields causes the radio to be temporarily disabled and thus might result in
loss of connectivity for some clients.

Radio
Assignment

Band Selection, RF
Channel Assignment, and Tx Power Level Assignment appears only for Serving
assignment method.

Band Selection— You can either choose
2.4 GHz or 5 GHz radio.

Antenna

Depending on the
Radio Assignment selection, the following parameters appear:

Antenna Type—Indicates the
antenna type: External or Internal.

XOR A Antenna—(Displayed
only for Auto assignment method). Choose the external antenna or Other from the
drop-down list.

XOR B Antenna—(Displayed only for
Auto assignment method). Choose the external antenna or Other from the
drop-down list.

External Antenna—(Displayed for
Serving and Monitor assignment method). Choose the
external
antenna or
Other from the drop-down list. The values in the
drop-down varies for 2.4 GHz and 5GHz radio.

Antenna
Gain—(Displayed for Serving and Monitor assignment method). Enter the desired
antenna gain in the text box. To configure the custom antenna gain, select
Others for the External Antenna option.

Note

The peak gain of
the dBi of the antenna for directional antennas and the average gain in dBi for
omni-directional antennas connected to the wireless network adapter. The gain
is in multiples of 0.5 dBm. An integer value 4 means 4 x 0.5 = 2 dBm of gain.

RF Channel
Assignment

The following 802.11a
RF Channel Assignment parameters appear only if you have selected Radio
Assignment method as Serving.

Global—Use
this setting if the channel of the access point is set globally by the
controller.

Custom—Use
this setting if the channel of the access point is set locally. Select a
channel from the Custom drop-down list. The values in the drop-down varies for
2.4 GHz and 5 GHz radios.

11n and 11ac Parameters

11n Supported—Indicates whether or not 11n radio is supported.

11ac Supported—Indicates whether or not 11ac radio is supported.

Performance Profile

Click the URL to view or edit performance profile parameters for this access point interface.

ClientLink—Enable or disable client link for the access point radios per interface. This feature is only supported for legacy
(orthogonal frequency-division multiplexing) OFDM rates. The interface must support ClientLink, and OFDM rates must be enabled.
Also, two or more antennas must be enabled for transmission, and all three antennas must be enabled for reception.

Note

The maximum number of clients supported is 15. If the antenna configuration restricts operation to a single transmit antenna
or OFDM rates are disabled, ClientLink cannot be used.

Tx Power Level Assignment

Current Tx Power Level—Indicates the current transmit power level.

Assignment Method—Select one of the following:

Global—Use this setting if the power level is set globally by the controller.

Custom—Use this setting if the power level of the access point is set locally. Choose a power level from the drop-down list.

11n Antenna Selection

Prime Infrastructure provides the ability to enable or disable the use of specific antennas. All antennas are enabled by default.

Note

At least one transmitting and one receiving antenna must be enabled. You cannot disable all transmitting or all receiving
antennas at once.

Select any of the 11n Antenna Selection parameters:

Antenna A

Antenna B

Antenna C

Antenna D

11n
Parameters

The following 11n
fields appear:

11n Supported—Indicates
whether or not 802.11n radios are supported.

Client Link—Use this option
to enable or disable client links. Choose
Enable,
Disable, or
Not
Applicable from the drop-down list.

Track Tagged Assets
Using Wireless Chokepoints

Chokepoints are low
frequency transmitting devices. When a tag passes within range of placed
chokepoint, the low-frequency field awakens the tag that in turn sends a
message over the Cisco Unified Wireless Network including the chokepoint device
ID. The transmitted message includes sensor information (such as temperature
and pressure). A chokepoint location system provides room level accuracy
(ranging from few inches to 2 feet depending on the vendor).

Chokepoints are
installed and configured as recommended by the Chokepoint vendor. After the
chokepoint installation is complete and operational, the chokepoint can be
entered into the location database and plotted on a the
Prime Infrastructure
map.

Copy and Replace APs

The Copy and Replace AP feature is useful if you need to remove an access point from the network and replace it with another
access point. The below access point configuration parameters get copied from old to new APs:

Controller Configuration

Static IP Configurations

AP Groups

Location

AP Name

Performance Profiles

Antenna Angle Parameters

Note

AP Name should not contain a ,(comma), as it disrupts the behaviour.

MAC addresses can either be Base Radio MAC or Ethernet MAC.

To copy and replace a single AP, follow the procedure:

Procedure

Step 1

Choose Configuration > Wireless Technologies > Copy and Replace APs.

Step 2

In the Select Type area, click Single AP Copy radio button.

Step 3

Select the Source AP and the Destination AP you want to replace it with.

Step 4

Check the CopyLocation checkbox if you want to copy the map location.

Step 5

Click Submit.

Copy and Replace APs in Bulk

To copy and replace multiple APs in bulk using a CSV file, follow the procedure:

Procedure

Step 1

Choose Configuration > Wireless Technologies > Copy and Replace APs.

Step 2

In the Select Type area, click Bulk Copy radio button.

Step 3

Click Choose File button.

Step 4

Navigate to the desired CSV file and click Open.

Note

Only Disassociated_MAC_Address(Source) and Associated_MAC_Address(Destination) columns are mandatory in the CSV file.

Step 5

Click Submit.

Delete APs

To remove access
points that are not associated, follow these steps:

Procedure

Step 1

Choose
Configuration > Wireless
Technologies > Access Point Radios.

Step 2

From the Select
a command drop-down list, choose
Remove
APs.

Step 3

Click
Go.

Step 4

Click
Okto confirm the removal.

Schedule AP Radio
Status Changes

To schedule a radio
status change (enable or disable), follow these steps:

Procedure

Step 1

Choose
Configure > Access
Points.

Step 2

Select the
check box for the applicable access point(s).

Step 3

From the Select
a command drop-down list, choose
Schedule
Radio Status.

Step 4

Click
Go.

Step 5

Choose
Enable or
Disable from the Admin Status drop-down list.

Step 6

Use the Hours
and Minutes drop-down lists to determine the scheduled time.

Step 7

Click the
calendar icon to select the scheduled date for the status change.

Step 8

If the
scheduled task is recurring, choose
Daily or
Weekly as applicable. If the scheduled task is a
one-time event, choose
No
Recurrence.

Step 9

Choose
Save to confirm the scheduled task.

View Scheduled AP
Radio Status Changes

To view currently
scheduled radio status tasks, follow these steps:

Procedure

Step 1

Choose
Configure > Access
Points.

Step 2

Select the
check box for the applicable access point(s).

Step 3

From the Select
a command drop-down list, choose
View
Schedules Radio Task(s).

Step 4

Click
Go.

The Scheduled
Task(s) information includes:

Scheduled
Task(s)—Choose the task to view its access points and access point radios.

Scheduled
Radio admin Status—Indicates the status change (Enable or Disable).

Schedule
Time—Indicates the time the schedule task occurs.

Execution
status—Indicates whether or not the task is scheduled.

Recurrence—Indicates Daily or Weekly if the scheduled task is
recurring.

Next
Execution—Indicates the time and date of the next task occurrence.

Last
Execution—Indicates the time and date of the last task occurrence.

Unschedule—Click Unschedule to cancel the scheduled task. Click
OK to confirm the cancellation.

View Audit Status
for APs

An Audit Status
column in the
Configure
Access Points page shows an audit status for each of
the access points. You can also view the audit report for the selected access
points. The report shows the time of the audit, the IP address of the selected
access point, and the synchronization status.

To view the audit
status, follow these steps:

Procedure

Step 1

Choose
Configure > Access
Points.

Step 2

Click the
Audit
Status column value to go to the latest audit details page for the
selected access point. This report is interactive and per access point.

Note

If you hover
your mouse cursor over the Audit Status column value, the time of the last
audit is displayed.

To run an access point on-demand audit report, select the desired
access point for which you want to run the report and choose
Audit Now from the Select a command drop-down
list. In versions prior to 4.1, the audit only spanned the parameters present
in the AP Details and AP Interface Details page. In Release 4.1, this audit
report covers complete access point level auditing. The audit results are
stored in the database so that you can view the latest audit reports without
having to run another audit.

Note

The audit can only be run on an access point that is associated to
a controller.

Find Access
Points

Use the search
options in the uppermost right corner of the page to create and save custom
searches:

New Search: Enter an IP
address, name, SSID, or MAC, and click
Search.

Saved Searches: Click
Saved
Search to choose a category, a saved custom search, or choose other
criteria for a search from the drop-down lists.

Advanced Search: An advanced
search allows you to search for a device based on a variety of categories and
filters.

After you click
Go, the access point search results appear (see
Table 1).

Table 1. Access Point
Search Results

Field

Options

IP Address

IP address of
the access point.

Ethernet MAC

MAC address
of the access point.

AP Name

Name assigned
to the access point. Click the access point name item to display details.

Radio

Protocol of
the access point is either 802.11a/n or 802.11b/g/n.

Map Location

Campus,
building, and floor location.

Controller

IP address of
the controller.

AP Type

Access point
radio frequency type.

Operational
Status

Displays the
operational status of the Cisco radios (Up or Down).

Alarm Status

Alarms are
color coded as follows:

Clear = No Alarm

Red = Critical Alarm

Orange =
Major Alarm

Yellow =
Minor Alarm

Audit Status

The audit
status of the access point.

Serial Number

The serial
number of the access point.

AP Mode

Describes the
role of the access point modes such as Local, FlexConnect, Monitor, Rogue
Detector, Sniffer, Bridge, or SE-Connect.

View Alarms for APs
in the Maintenance State

Prime Infrastructure
uses critical alarms to track if the managed access points are down. The
controller sends three different alarms when the following occurs:

The Access point is down

Radio A of the access point is down

Radio B/G of the access point is down

In Release 7.0.172.0
and later, these 3 alarms are grouped into a single alarm.

When an access point
is under technical maintenance, the critical alarms need to be deprioritized.
You can deprioritize the severity of an alarm of an access point using the
Configure > Access
Points page. When you move an access point to
maintenance state, the alarm status for that access point appears in black
color.

Put APs in
Maintenance State

Procedure

From the
drop-down list, choose
Place in Maintenance State, and click
Go.

The access
point is moved to maintenance state.

Once the access
point is moved to maintenance state, the access point down alarms are processed
with lower severity instead of critical.

Remove APs from
Maintenance State

To remove an access
point from the maintenance state, follow these steps:

Procedure

Step 1

Choose
Prime
Infrastructure > Configure > Access
Points.

The Access
Points page appears.

Step 2

From the
drop-down list, choose
Remove from Maintenance State, and click
Go.

The access
point is removed from the maintenance state.

Wireless Configuration
Groups

Wireless Configuration
Groups workflow is the improved workflow of WLAN Controller Configuration
Groups feature, which is available in Cisco Prime Infrastructure. With the
improved Wireless Configuration workflow, you can:

Procedure

In the General Configuration tab, enter the configuration group
name, and click Next.

The Select Template tab appears.

Step 4

In the Select Template tab, select the Device Type: CUWN or
CUWN-IOS and UA.

Step 5

Drag and drop a template or a group from
Templates tree view > My
Templates to the Selected Template(s) group box.

The Selected Template(s) group box lists templates or groups,
which were added from the Templates tree view.

Step 6

Click
Save and Quit to save the configuration group
and quit the work flow.

Step 7

Click
Next to save the configuration group and to
deploy the templates selected.

The Select Devices tab appears.

Step 8

The Select Devices tab lists Controllers based on the device type
selected.

Step 9

Select the Device Name check box and click Deploy.

Once the deploy is successful, the Wireless Configuration
Groups list page appears.

The Wireless Configuration Groups page contains the following
details for the deployed device:

Group Name

Last Deployed Devices Count

Templates Count

Last Deploy Status

Not Initiated —Indicates if the device is deployed on any
of the devices or not.

Success—Indicates the number of successful templates
associated with the applicable IP address.

Partial Success / Failure—Indicates the number of failures
with provisioning of templates to the applicable controller. Click on Partial
Success / Failure link to know the reason for failure.

Last Undeploy status

Last Audit Status

Background Audit—Turn the On/Off toggles to enable the
background audit. If this is turned on, then all the templates that are part of
this group are audited against the controller during network and controller
audits.

Enforcement—Turn the On/Off toggles to enable the enforcement.
If enforcement is turned on, then the templates are automatically applied
during the audit if any discrepancies are found.

Last Modified On

Last Applied On

Add or Remove
Templates from Wireless Configuration Group

The Config Groups Audit page allows you to verify if the controllers
configuration complies with the group template. During the audit, you can leave
this screen or logout of Cisco Prime Infrastructure. The process continues, and
you can return to this page later to view the report.

Note

Do not perform any other configuration group functions during the
audit verification.

Drag and drop a
template or a group from the
Templates tree view to the Selected
Template(s) group box.

The Selected Template(s) group box will list the selected template
or groups which were added from the Templates Tree view.

Audit Wireless Config Groups

The Config Groups Audit page allows you to verify if the controllers
configuration complies with the group template. During the audit, you can leave
this screen or logout of Cisco Prime Infrastructure. The process continues, and
you can return to this page later to view the report.

Note

Do not perform any other configuration group functions during the
audit verification.

A report is generated and the current configuration on each
controller is compared with that in the configuration group template. The
report displays the audit status, the number of templates in sync, and the
number of templates out of sync.

Audit Status

Not Initiated

Success—Indicates whether the number of templates
associated with the applicable IP address are in sync or not.

Not In Sync—Indicates the number of failures with
provisioning of templates to the applicable controller. Click Not In Sync to
know more details.

AP Uptime—These
statistics help determine if an access point is rebooting frequently.

LWAPP Join Taken
Time—These statistics determine how long it takes an access point to join.

Location
Links—Allows you to navigate to Prime Infrastructure map or the Google Earth
location.

Define Controller
Rogue AP Classification Rules

You can view or
edit current rogue access point rules on a single WLC.

To access the rogue
access point rules, follow these steps:

Procedure

Step 1

Choose
Configure > Controllers.

Step 2

Click an IP
address in the IP Address column.

Step 3

From the left
sidebar menu, choose
Security > Rogue AP
Rules. The Rogue AP Rules displays the rogue access
point rules, the rule types (malicious or friendly), and the rule sequence.

Step 4

Choose a Rogue
AP Rule to view or edit its details.

Use Controller
Auto-Provisioning to Add and Replace WLCs

Prime Infrastructure
simplifies WLAN deployments with support for auto-provisioning. Auto
provisioning allows Prime Infrastructure to automatically configure a new or
replace a current Cisco Wireless LAN Controller (WLC).
Prime Infrastructure
auto provisioning feature can simplify deployments for customers with a large
number of controllers.

Note

The controller
radio and b/g networks are initially disabled by the
Prime Infrastructure
startup configuration file. You can turn on those radio networks by using a
template, which should be included as one of the automated templates.

View the Controller
Auto Provisioning List

The Auto Provision
Filters page allows you to create and edit auto provisioning filters that
define the list of allowable devices to be auto provisioned or auto monitored
by Prime Infrastructure.

For Auto Provisioning
privileges, you must have Admin, Root, or Super User status. To allow or
disallow a user Auto Provisioning privileges, edit the permitted tasks using
Administration > User Roles
& AAA User Groups > group
name > List of Tasks Permitted
in Prime Infrastructure. Select or unselect
the check box to allow or disallow these privileges.

Filter parameters
include:

Parameter

Description

Filter Name

Identifies
the name of the filter.

Filter
Enable

Indicates
whether or not the filter is enabled.

Only
enabled filters can participate in the Auto Provisioning process.

Monitor
Only

If
selected, the Cisco WLC defined in this filter is managed by Prime
Infrastructure but not configured by Prime Infrastructure if the Cisco WLC
contacts Prime Infrastructure during the auto provisioning process.

All
Config-Groups used by auto provision filters should not have any controller
defined in them.

Create Controller
Auto Provisioning Filter

To specify the Auto
Provision filter contents, you can directly enter the details in the
application or import the details from a CSV file. The auto provisioning
feature supports the 5500 and non-5500 series controllers. The non-5500 series
controllers have AP manager interface configuration information defined,
whereas 5500 series controllers do not have this information.

You can specify
the Dynamic Interface configuration and Device Specific configuration details
only when you input a CSV file. These two configurations cannot be performed
using the graphical user interface.

Step 4

Click
Save.

To change the
default username and password, you need to delete and then recreate the admin
user and explained in Steps 5 through Step 8.

Step 5

To change the
default username and password, you need to create a new read/write user on the
controller using the Local Management User Template. You must create this new
user so that you can delete the default admin user as shown in Step 6.